Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft
File:                     r6xXdRxedph17Sb1vN8X9T3_nJk.mft (raw, json)
Hash identifier:          UoxbZ3u7p4uxnnW5RQMAs3yxEh4EbjIGh6Q6h3zL/3M=
Subject key identifier:   3F:11:F6:E0:1C:1C:4D:A9:D6:23:39:73:F9:EB:01:E3:F9:A3:CE:FF
Authority key identifier: AF:AC:57:75:1C:5E:76:98:75:ED:26:F5:BC:DF:17:F5:3D:FF:9C:99
Certificate issuer:       /CN=A914F0E7/serialNumber=AFAC57751C5E769875ED26F5BCDF17F53DFF9C99
Certificate serial:       0763
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft
Manifest number:          075E
Signing time:             Tue 04 Nov 2025 21:44:03 +0000
Manifest this update:     Tue 04 Nov 2025 21:44:03 +0000
Manifest next update:     Tue 11 Nov 2025 21:44:03 +0000
Files and hashes:         1: r6xXdRxedph17Sb1vN8X9T3_nJk.crl (hash: j/oqYOFzm4m9o9y+yGT1zXauGtHukI7AQwGH78Pyyig=)
                          2: 595EF8C63DC711EBA35AB51DC4F9AE02.roa (hash: kDcfkRRwNdoJ431TUAg/mhxPRjcYBJFeGLnnYla+ins=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.crl
                          rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891 (0x763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F0E7, serialNumber=AFAC57751C5E769875ED26F5BCDF17F53DFF9C99
        Validity
            Not Before: Nov  4 21:44:03 2025 GMT
            Not After : Nov 11 21:44:03 2025 GMT
        Subject: CN=690a73a3-9ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:88:45:e8:f8:44:9d:aa:7e:aa:78:96:77:4b:
                    a6:65:00:62:25:98:ce:92:21:99:52:a2:65:bc:2c:
                    68:7a:e7:cc:39:aa:fa:3d:d5:8d:8f:e3:07:c3:59:
                    f5:50:f7:b4:9b:e6:b7:e1:b1:54:af:49:74:5c:97:
                    ce:df:60:37:bf:f0:5d:1d:4c:4f:74:bf:1a:6d:ee:
                    26:cd:b1:c4:74:28:d1:67:e2:87:81:55:81:fe:0a:
                    03:00:7b:dd:e4:a0:4d:49:1b:48:c3:79:37:6d:50:
                    a9:31:6b:80:07:56:58:6c:db:ad:23:a4:95:b1:c8:
                    6f:4f:5e:ba:d2:1d:6a:0c:f8:f3:1a:19:7f:cb:b4:
                    8e:12:80:c1:11:6c:f9:39:dc:09:3f:71:8a:75:26:
                    06:e0:4b:cf:c7:64:95:91:7c:14:88:9a:e6:11:5e:
                    c2:4e:8b:31:22:91:c9:5f:55:22:d5:ac:6d:3e:dd:
                    09:f3:d1:3b:f8:26:31:4b:38:78:2c:27:6f:41:50:
                    47:6c:c8:f0:ec:0e:18:41:a9:d7:27:2f:a4:b1:bc:
                    98:8e:27:8a:3f:fb:6a:88:8e:34:ed:98:ae:31:09:
                    69:39:ff:10:50:58:62:36:a2:90:41:7a:0a:07:45:
                    b3:ca:6b:3b:d6:54:51:d2:c6:2e:df:fc:6a:83:ac:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:11:F6:E0:1C:1C:4D:A9:D6:23:39:73:F9:EB:01:E3:F9:A3:CE:FF
            X509v3 Authority Key Identifier:
                keyid:AF:AC:57:75:1C:5E:76:98:75:ED:26:F5:BC:DF:17:F5:3D:FF:9C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9c:ba:3e:d8:bc:22:e8:28:32:cb:84:6c:c2:f4:d7:8a:71:
         03:d9:c4:99:96:8b:e2:c7:ba:63:39:b8:d0:9c:e9:30:fd:5e:
         42:3a:96:37:87:5d:16:12:ec:ad:87:71:8e:e6:90:f8:9f:a2:
         28:c1:4b:0b:a0:73:fb:21:84:c1:7f:59:13:49:4a:2b:d9:56:
         cb:ea:dd:85:59:e4:3a:2a:54:3e:b9:47:c5:6b:a4:be:d9:e1:
         30:5c:2c:08:a4:11:c0:00:d0:81:47:60:c3:1d:97:8d:ae:59:
         1c:1f:6d:a0:c2:00:78:6a:c0:05:f9:6a:5e:d7:9f:ed:48:8b:
         aa:f8:9b:72:de:1f:14:a2:30:12:15:39:0e:4a:1c:85:b2:6d:
         44:aa:a8:5d:65:ea:ac:a9:66:97:f7:96:4d:bf:7b:e4:49:9a:
         79:ce:73:98:ad:a4:4b:b0:38:39:1f:34:d6:17:51:0b:6c:95:
         46:7b:4e:01:68:65:f4:b6:1c:7f:4f:55:3f:ed:a4:04:ce:69:
         71:2a:0c:66:a3:0e:52:2a:8c:7f:bc:15:c5:5a:4f:19:a4:1a:
         7d:62:f9:96:01:97:10:9e:d3:ef:a9:1b:17:a5:42:ce:2f:9e:
         c2:c9:4b:65:fa:94:a4:52:28:23:46:d0:4b:cc:9a:02:e9:49:
         e3:0f:da:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:20:01 2025 by rpki-client